Meet  Tomorrow’s  Mobile  Phones:  Ma  Bell  wouldn’t  recognize  these  cool 
concept  phones  -  or  the  technologies  behind  them. 
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beating  back  a  cyclops.  easy. 


1.  Fight. 


But  there's  no  shame  in  running.  The  Cyclops  plans  to  kill  you,  tear 
you  to  pieces,  and  eat  you.  Survival  is  job-number  one. 


2.  Drive  him  to  tears. 

Start  chopping  onions,  and  tell  him  it's  for  a  batch  of  your 
award-winning  chili.  He’ll  be  too  bleary-eyed  to  fight. 


3.  Give  him  an  eye  test. 

Tell  him  he’ll  need  a  monocle,  which  you  happen  to  have  in  the 
back  room,  then  simply  slip  out  the  back. 


4.  Use  the  classics. 

A  banana  peel,  strategically  placed,  is  still  hard  to  beat.  Lure  the 
Cyclops  to  his  slippery  doom,  then  run. 


5.  The  flashlight  gambit. 

A  bright  light  shined  into  his  retina  may  blind  him  long  enough  to 
afford  your  escape.  It  might  also  just  make  him  angrier,  so  be  careful. 


6.  Show  a  little  tenderness. 

Maybe  the  Cyclops  is  sensitive  about  his  frankly  odd  looks.  Maybe 
that’s  why  he's  so  angry.  Try  a  hug. 


beating  back  security  threats,  easier. 


1.  Implement  Microsoft  Forefront. 

Forefront  makes  defending  your  systems  easier  It's  a  comprehensive,  simple- 
to-use,  integrated  family  of  products  that  helps  provide  protection  across  your 
client,  server,  and  network  edge.  For  case  studies,  free  trials,  demos,  and  all  the 

Forefront  is  business  security  software  for  client,  server,  and  the  network  edge. 


of  locking  up  San  Franciscos 
municipal  WAN.  |  A  fanner  DBA  gets 
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Ants  lift  up  to  50  times  their  own  weight. 


They  can’t  measure  the  true  value  of  what  they  do. 

But  you  can  With  proven  information  management  software  from  SAS. 

www.sas.com/ants 
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WORLD’S  LARGEST  PRIVATELY  HELD  SOFTWARE  PRODUCER 
WITH  44,000  CUSTOMER  SITES  IN  111  COUNTRIES. 


Don  Tennant 


Raining  Mud 


I’LL  ADMIT  that  when  I  walked  into  the  George  R. 

Brown  Convention  Center  in  Houston  a  couple  of  weeks 
ago  on  the  opening  day  of  the  Microsoft  Worldwide 
Partner  Conference,  I  did  so  with  a  preconception.  I  was 
fairly  certain  that  the  topic  of  utmost  concern  to  those 

partners  —  resellers,  sys-  gone  [to  Vista]  yet,  just  like  soft’s  partner  community, 

terns  integrators,  indepen-  many  IT  departments."  Oud  expressed  frus- 

dent  software  vendors  and  Still,  I  spoke  with  just  tration  that  Microsoft 

the  like  —  would  be  the  as  many  partners  who  hadn’t  done  anything  of 

Windows  Vista  embarrass-  couldn’t  praise  Vista  high-  substance  with  SaaS.  He 

ment  I  was  wrong.  ly  enough.  said  people  are  “scared  to 

That’s  not  to  say  Micro-  Rob  Oud,  CEO  of  CAD  death"  to  implement  new 

soft  still  doesn’t  have  &  Co.,  a  Microsoft  Gold  systems  because  of  the 

plenty  of  hearts  and  minds  Certified  Partner  in  Am-  cost  and  complexity.  SaaS, 


by  Microsoft. 

I  asked  Allison  Watson, 
Microsoft’s  corporate  vice 
president  in  charge  of  the 
worldwide  partner  group, 
whether  it  was  intentional 
to  avoid  the  term  “soft- 

“Yeah,  very  intentional,” 
Watson  responded.  She 
said  Microsoft  sees  the 
concept  of  SaaS  as  “way 
too  limiting.”  The  Soft- 


of  SaaS  —  where  the  soft¬ 
ware  resides  in  the  cloud 
—  and  the  provisioning 
of  software  on  rich-client 


and  Michael  Demeyer,  the 
company's  vice  president 
of  OEM  products,  sat  on 
a  panel  that  discussed  the 
Vista  certification  process. 
Imagine  the  red  faces  in 
the  room  when  Demeyer 
mentioned  how  he  ob- 


“Our  internal  IT  depart-  ..—--I  >L.  f 

ment  still  doesn’t  support 
vista,  i  had  to  go  to  cdw  sonware  as  a 
with  my  Amex  card,”  De-  86TV1CC  III  «Uiy 
meyer  said.  “They  haven’t  public  fOTUlTI. 


■  Oddly,  almost 
eerily,  no  one  from 


the  nagging  SaaS  questior 
But  oddly,  almost  eerily,  n 
one  from  Microsoft  ever 
used  the  term  "software 


Microsoft  needs  to  be  OK 
with  being  under  the  cloud 
with  the  rest  of  us,  rather 
than  demanding  to  reign 
above  it  Otherwise,  it’s  just 
going  to  rain  more  mud.  ■ 
Don  Tennant  is  editorial 
director  of  Computerworld 
and  InfoWorld.  Contact 
him  at  don_tennant@ 
computerworld.com,  and 
visit  his  blog  a  http:// 
blogs.computerworld.com/ 
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I  ONLINE  CHATTER 


Should  ‘Spam  King’ 
Soloway  Pay  the 
Price  for  Worse? 

July  11,2008 

The  punishment  does  fit  the  crime. 
Spam  is  theft  —  spammers  take  up 
space  on  my  servers,  they  take  up 
bandwidth  on  my  Internet  pipes, 
and  they  make  me  buy  more  hard¬ 
ware  to  filter  their  junk  out. 

We  need  to  make  an  example  of  a 
few  spammers. 


His  lawyer  is  correct;  he  should  get 
only  five  years  —  for  each  e-mail. 

■  Submitted  by:  Trollicus 

I  work  as  a  systems  administrator 
for  a  small  firm,  and  spam  is  one  of 
the  worst  problems  we  have.  On  an 
average  day,  we  receive  15,000  junk 
e-mails.  What  a  waste  of  time  and 
money  trying  to  filter  out  the  bad 
e-mails  from  the  good. 

The  cost  of  his  crimes  is  probably 
hundreds  of  times  more  than  what 
he  swindled,  when  you  consider 


Find  theta  stories  at  cc 


missed  orders  that  were  caught  in 
spam  filters,  and  the  cost  of  anti¬ 
spam  hardware  and  software. 

■  Submitted  by:  Anonymous 

RESPONSE  TO: 

Microsoft  Warns 
Users  of 

Coming  Update  to 
Windows  Update 

July  7, 2008 

About  the  only  Windows  automatic 
update  that  I  ever  want  to  be  a  part 
of  again  is  the  one  that  will  update 
Vista  to  not-Vista.  Any  news  on 
when  that  one  is  coming? 

I  used  to  be  a  big  defender  of 
Microsoft.  Now  I  just  get  that  sick, 
nasty  feeling  in  my  stomach  every 
time  I  see  one  of  my  machines  boot. 

And  every  time  I  see  a  new  Micro¬ 
soft  update  installed  and  I  have  no 
idea  what  it  really  is,  I  am  filled 
with  disgust,  a  little  bit  of  rage  and  a 
lot  of  hopelessness. 

T-  Thomas  White 
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San  Francisco  IT  Admin 
Locks  Up  City  Network 


on  a  S5  million  bond  on  charges  [ 


MONDAY:  Apple  plans  to  report  Its  Q3  results.  Also  due 
to  issue  earnings  reports  are  Yahoo  and  VMware  on  Tues¬ 
day,  and  the  latter’s  parent  company,  EMC,  on  Wednesday. 
MONDAY:  The  O'Reilly  Open  Source  Convention  opens  in 
Portland,  Ore.  An  Ubuntu  Linus  user  conference  was  sup¬ 
posed  to  be  collocated  with  Oscon,  but  it  has  been  canceled. 


A  NETWORK  adminis-  and  arraigned  last  Thursday 
trator  late  last  week  in  San  Francisco  Superior 
pleaded  innocent  to  Court.  He  was  ordered  held 
charges  that  he  locked  up  on  a  $5  million  bond  until  a 
a  kev  citv  of  San  Francisco  hearine  slated  bv  Tudee  Paul 


very  confident  that  we  will 
have  full  access,"  he  said. 

Vinson  said  the  city 
is  working  with  Cisco  to 
repair  the  problem.  If  the 
hardware  has  been  tam¬ 
pered  with,  replacement 
costs  could  easily  reach 
$250,000,  he  added. 

Harris  said  it's  unknown 
why  Childs  allegedly  tam¬ 
pered  with  the  system.  But 
a  source  familiar  with  the 
situation  said  the  suspect’s 
behavior  had  become  erratic 
in  the  days  leading  up  to  his 

I  San  Francisco  began  roll- 

|  ing  out  the  network  about 
four  years  ago  as  a  less- 
costly  alternative  to  leased 
data  lines.  The  city  has  so  far 
spent  more  than  $3  million 
on  the  system.  Vinson  said 
the  tampering  was  discov¬ 
ered  several  weeks  ago  dur- 


DBAGets 
Jail  Time  for 
Data  Thefts 


8.5  mtHkm  consumers  was 
sentenced  to  57  months  in 
prison  by  a  federal  judge  in 


The  rogue  DBA’s 
duties  at  Certegy 
included  defining 
and  enforcing 
data  access  rights. 


■  NEWS  DIGEST 


Short 

lakes 


SAP  Forcing  Support 
Upgrades  on  Customers 

—  AP  AG  last  week 

announced  plans  I  MM  |’m  on¬ 
to  “transition”  all  .  .  Jy 

customers  to  its  new  ™  .  r**® 

enterprise-level  support  pro-  yOU  IlS  a  QOOd 
gram  as  of  Jan.  1, 2009.  The  dgg|i  _  _  >  j||g  don’t 

change  will  provide  some  to  DW  more 

customers  with  increased  ,  il,:.,  . 

levels  of  service  but  also  fOT  SnyUldy. 
make  them  pay  higher  fees.  MIKE  O'DELL.  CHAIRMAN. 

The  vendor  said  that  its  |  AMERICAS' SAP  USERS' GROUP 
Enterprise  Support  offer- 

ing,  unveiled  in  February  Forrester  Research  Inc. 
and  rolled  out  in  May,  will  analyst  Ray  Wang  said  in 

replace  its  Standard  and  a  report  issued  last  week 

Premium  support  options.  that  the  move  was  likely 
Some  of  the  new  features  a  response  to  competitive 
will  be  available  to  the  pressures  from  rivals  like 

transitioned  customers  Oracle  Corp.  and  a  result 

immediately,  but  those  us-  of  SAP’s  decision  in  April 


prodding  SAP  user  groups 
to  protest  the  increases. 

Mike  O'Dell,  chairman 
of  the  Americas’  SAP  Us¬ 
ers'  Group,  said  that  ASUG 
members  convinced  SAP  to 
boost  prices  gradually.  SAP 
initially  planned  to  move 
customers  to  the  22%  rate 
immediately,  said  O'Dell, 
who  is  CIO  at  Pacific  Coast 
Companies  Inc.,  a  building 
materials  maker  in  Rancho 
Cordova,  Calif. 

“We  weren’t  successful 
in  blocking  it.  We  would 
have  liked  to,”  he  said.  “We 


“I’m  not  going  to  tell  you 
it's  a  good  deal.  From  my 
company’s  perspective,  we 
don’t  like  to  pay  more  for 
anything,”  O’Dell  added. 
Pacific  Coast  uses  the  Stan- 


hoped  to  simultaneously 
build  two  35,000-square- 
foot  data  centers  to  replace 
the  older  facility,  located 
near  the  Cumberland  River 
in  Nashville.  However, 
budget  shortfalls  forced  the 
state  to  build  one  data  cen¬ 
ter  at  a  time,  said  Tennessee 
CIO  Mark  Bengel. 

Once  the  first  new  data 
center  is  completed  by  the 
end  of  the  first  quarter  of 
2009,  the  state  will  move 
"the  most  critical  applica¬ 
tions”  there,  Bengel  said. 
The  facility  will  also  serve 
as  a  fail-over  site,  he  said. 

At  that  point,  if  budget 
conditions  are  favorable,  the 
state  hopes  to  immediately 
begin  work  on  the  second 
data  center.  It  would  be  lo¬ 
cated  about  25  to  30  miles 
from  the  first  new  facility. 

Bengel  said  there  are 
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Corporate  IT  Can 
Learn  a  Lot  From 
Web  2.0  Coders 


Wesabe  Inc.,  which  runs  a 
personal  finance  Web  site, 
doesn’t  have  a  formal  inter¬ 
nal  quality  assurance  group. 
Instead,  the  San  Francisco- 
based  company  relies  on 
users  and  founder  and  CEO 
Marc  Hedlund. 

Wesabe’s  developers  work 
with  users  to  come  up  with 
new  features,  and  then  Hed¬ 
lund  tests  them  before  roll- 


Companies  can  cut  costs 
and  boost  productivity  by 
focusing  more  on  their  users. 

By  Heather  Havenstein 


ON  JULY  14, 
Yahoo  Inc.’s 
Flickrunit  re¬ 
ported  that  the 
latest  update  to 
the  photo-sharing  Web  site 


Quick,  incremental  up¬ 
dates,  along  with  heavy 
user  involvement,  are  key 
characteristics  of  an  emerg¬ 
ing  software  development 
paradigm  championed  by  a 


quality  if  managers  and  de¬ 
velopers  are  willing  to  make 
some  hard  changes. 

“Sometimes  enterprise 
organizations  tend  to  look 
at  these  [Web  2.0-focused] 
places  and  say  they  are  not 
very  disciplined,"  said  Jef¬ 
frey  Hammond,  an  analyst 
at  Forrester  Research  Inc. 
“That  is  not  the  case.  They 
have  built  discipline  into  the 
process  that  allows  them  to 
be  very  reactive  —  a  [good] 


William  Gribbons,  direc¬ 
tor  of  the  graduate  program 
in  human  factors  at  Bentley 
College  in  Waltham,  Mass., 
said  that  large  companies 
can  benefit  financially  by 
using  Web  2.0  techniques 
to  develop  applications  for 
employees. 

“Companies  often  think 
their  [internal]  applica¬ 
tions  are  different  because 
they’re  used  by  employees 
[who]  are  compensated  for 


.INFRASTRUCTURE  LOG 
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Continued  from  page  12 
users  interacting  with  pro 
types,  Gribbons  suggestei 


*LJ  sumer-focused  Web 
2.0  applications  may  seem 
simple,  that  simplicity  is 
usually  the  result  of  hard 
work  by  developers  working 
hand-in-hand  with  users. 

Stan  Schroeder,  a  blog- 


are  using  scripting  languag¬ 
es  to  some  degree,  according 
to  a  December  survey  by 
Evans  Data  Corp.,  a  Santa 
Cruz,  Calif,  research  firm. 

While  more  than  half  of 
those  developers  now  use 
scripts  less  than  20%  of  the 
time,  both  the  total  number 
of  developers  using  scripting 
languages  and  the  amount 
of  time  spent  will  likely  in¬ 


power,  its  intended  audience 
shrinks,"  Schroeder  wrote. 

Many  times,  traditional 
enterprise  IT  shops  will 
identify  a  need  and  develop 
multiple  ways  of  meeting 
it  when  the  user  would  be 
happy  with  just  one  way, 
Gribbons  noted.  But  without 
constant  interaction  with 
users,  developers  are  often 


3  Stick  to  the  script. 

Web  2.0  companies 
are  partial  to  dynamic 
scripting  languages  like 
Ruby,  Python,  Perl  and  PHP, 


4  Release  aariy  and  often 

Wesabe,  like  Flickr, 
updates  its  site  often. 


with  users  provides  Wesabe 
developers  with  almost  im¬ 
mediate  notification  of  bugs 
Hedlund  noted. 


log  off  the  site  or  whether 
the  amount  of  financial  in¬ 
formation  uploaded  by  user 
has  dropped. 

Recommended  Reading 
Inc.’s  Mixx.com  social  news 
site,  which  allows  users  to 


Two  years  before 
launching  Wesabe 
Inc.,  founder  and 

CEO  Marc  Hedlund 

studied  many  of  the 


SHIFTING  OPINIONS 

Although  most  large  com¬ 
panies  are  unlikely  to  flock 
quickly  to  Web  2.0  devel¬ 
opment  techniques  —  and 
some  applications  would  not 
be  a  good  fit  for  this  meth¬ 
odology,  observers  acknowl¬ 
edged  —  some  are  starting 
to  realize  the  merits  of  these 
new  processes.  That’s  the 
message  of  a  July  1  survey  of 
more  than  1,300  developers 
that  Glastonbury,  Conn.- 


dent  of  strategy  at  Gannett 
Co.’s  USA  Today  newspaper. 

The  Mixx.com  develop¬ 
ment  team,  which  meets 
daily  to  discuss  the  previous 
day’s  work,  uses  the  Scrum 
agile  development  method. 


Top  Internet  companies 
like  Amazon.com  Inc.  and 
Google  Inc.  release  new 
features  to  small  subsets 
of  users  and  then  compare 
their  feedback  to  the  experi¬ 
ences  of  control  groups.  The 


traditional  corporate  devel¬ 
opment  teams  could  benefit 
from  Web  2.0  techniques, 
specifically  the  incremental 
feature  releases,  quick  user 
feedback  loops  and  quality 
assurance  programs  that 
include  users. 

What’s  more,  57%  of 
the  respondents  said  that 
problem-solving  and  ana¬ 
lytical  skills  will  be  key  re¬ 
quirements  for  next-genera¬ 
tion  developers,  while  18% 
cited  the  need  to  work  with 
online  communities.  Mean¬ 
while,  24%  said  that  code 
generation  is  the  key  long- 
velopment  skill. 


With  our  scanners,  everyone's  into  heavy  metal.  What's  different  about 
Kodak  i1200  and  i1300  Series  Scanners?  It's  what's  inside:  a  heavy-duty 
metal  paper  transport  that's  reliable  scan  after  scan.  Take  the  insider's 
online  "tour."  We'll  show  you  what  makes  these  scanners  rock. 
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Greg  1 


ALE 


announced  plans  to  shift  all 
of  its  users  to  a  new  support 
plan  that  will  increase  their 
software  maintenance  fees. 

Vendors  to  IT: 

the  vendors  he  deals  with 
“are  acknowledging  the 
difficult  economic  environ¬ 
ment  by  proactively  reach- 

SAP’s  price  increase  (see 
story,  page  8)  isn’t  the  only 

No  Economic 

ing  out  to  customers  with 
cost-reduction  suggestions." 

one  users  are  facing.  Oracle 
Corp.  raised  the  list  prices 
of  some  of  its  key  products 

Stimulus  Packages 

cused  on  maintenance  costs 
as  opposed  to  new  product 

by  15%  or  more  last  month. 
And  last  week,  Emerson 

For  You 

sales,  Morrison  said. 

Kevin  Bott,  CIO  at  Ryder 

price  of  some  of  its  data¬ 
center  cooling  and  power 
systems  by  5%,  passing 

As  the  economic  news  gets 
bleaker,  IT  execs  aren’t  get¬ 
ting  many  price  breaks  from 

transportation  and  logistics 
services  provider,  said  that 
IT  pricing  is  “definitely 

along  the  higher  costs  it’s 
paying  for  raw  materials. 

more  in  favor  of  the  buyers” 
now  than  it  had  been  over 

Such  actions  beg  the  ques¬ 
tion:  Are  IT  vendors  out  of 

vendors.  And  in  some  cases, 

the  past  couple  years. 
“We’re  seeing  bigger  dis¬ 

touch  with  reality? 

prices  are  actually  going  up. 

counts  than  we  normally 
see,”  Bott  said,  pointing  to 

from  bad  to  worse,  many 

IT  managers  are  seeking 
new  terms  and  price  breaks 

By  Patrick  Thibodeau 

substantial  savings  on  tele¬ 
communications  costs  as  an 
example.  But  Bott,  an  SAP 

When  your  company  is  on  one  network,  it  can  be  truly  flexible. 


Sprint 


How  Green  Is  Your  UPS? 


Ruby  on  Rails  is  poorly  documented 
in  many  areas,  such  as  interacting 
with  apps  written  in  Java  or  .Net. 

A  “slice”  (CPU,  memory,  storage 
and  such)  of  San  Francisco-based 


Servers,  switches  and  routers  certainly  suck  up  a  lot  of  PpHnne  Add/OS  Size 

electricity.  But  according  to  power  engineers  at  Cleveland-  MHl¥  w 

based  Eaton  Corp.,  all  that  hardware  actually  accounts  for  less  e  ancwansy°u 

than  a  third  of  your  data  center’s  electricity  demand.  Your  The  CEQ  of  FastScale  Technol- 

HVAC  and  power  management  systems  gobble  up  the  rest  ^  Inc  in  Santa  clara  CaUf  m 
So,  if  you  want  to  go  green,  more-  i  UPS  9395  825  and  its  power  distribu-  there's  no  reason  to  load  an  entire 


The  CEO  of  FastScale  Technol¬ 
ogy  Inc.  in  Santa  Clara,  Calif.,  says 
there’s  no  reason  to  load  an  entire 


Fujitsu  recommends  Windows  Vista '  Business  for  business  computing. 
/Fujitsu  recommends  Windows  Vista  "  Home  Premium  for  personal  compu 


New  energy  for  greater  mobility. 


The  LifeBook  T4200  Tablet  PC:  Energize  your  mobile  workforce 
with  Enterprise-class  reliability. 


The  Fujitsu  LifeBook®  T4200  Tablet  PC  with  Intel®  Centrino®  Duo  Mobile  Technology  reflects  the  Fujitsu 
commitment  to  delivering  the  most  reliable  products.  It's  manufactured  in-house  so  we  can  maintain  the 
highest  quality  standards.  The  Fujitsu  LifeBook  T4200  Tablet  PC  also  features  the  industry’s  first  bi-directional 
LCD  hinge  and  a  brilliant,  12.1*  XGA  display  with  wide  viewing  angles,  so  it’s  impressive  any  way  you  look  at 
it.  And  whether  you  use  its  keyboard  or  powerful  inking  capabilities  and  pen-driven  navigation,  you  get  the 
best  of  both  worlds.  Go  to  us.fujitsu.com/computers/reliability  for  more  information. 


SUPERIOR  CONNECTIVITY  Wi-Fi,  Gigabit  Ethernet.  BUILT-IN  MODULAR  BAY  add  a  weight- save'. 
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COMPUIERWORLD 


Converging  IT 
and  Business 


a  place  for  IT  at  the 
business  round  table 


FOR  DECADES,  CIOs  and  senior  IT 

managers  have  struggled  to  align  IT  with  business 
strategies.  Today,  the  pressure  to  do  so  is  greater  than 
ever.  Global  competition,  economic  uncertainty,  and 
increasing  demand  are  intensifying  the  requirement 
that  IT  operate  as  a  business  enabler. 

Searching  for  a  strategy  to  unite  IT  and  the  busi¬ 
ness,  and  thereby  driving  real  growth  while  improving 
service,  a  growing  number  of  CIOs  are  turning  to 
Business  Service  Management  (BSM).  Central  to  this 
strategy  are  the  integration  of  IT  management  disci¬ 
plines,  process  automation,  and  the  use  of  business 
values  to  measurelT  success.  This  comprehensive 
approach  is  delivering  the  level  of  services  the  dynamic 
business  world  requires. 

To  more  deeply  probe  the  emerging  BSM  environ- 

Importance  of  BSM  Benefits 

Please  rate  the  following  benefits  of  BSM  on  their  importance  to  your  organization. 


ment,  including  its  value  proposition  and  core  enabling 
projects,  Computerworld  teamed  with  CA  and  IDG 
Research  to  conduct  a  unique  survey  of  BSM  adoption 
in  large  organizations. 

The  survey  results,  which  are  available  in  a  white 
paper  and  as  a  slide  presentation  (see  download  offer  in 
box  below),  paint  a  clear  picture  of  BSM  winning  the 
hearts  and  minds  of  CIOs  seeking  to  match  the  highest 
quality  services  with  business  needs.  More  important, 
BSM  offers  CIOs  a  clear  path  away  from  managing 
devices  and  applications  as  the  main  focus  and  toward 
orchestrating  the  management  of  all  infrastructure 
components  to  support  business  services. 

Specifically,  two-thirds  of  the  Computerworld  survey 
of  1 10  senior  IT  managers  have  either  already  adopted 
BSM  or  are  planning  to  do  so  within  the  next  12 
months.  And  while  “better  alignment  of  IT  and  the 
business”  was  cited  most  often  as  the  key  driver  of 
BSM  adoption,  half  of  the  respondents  cited  the  use  of 
commonly  accepted  best  practice  standards  within 


IT  drives  your  business.  So  naturally,  it  consumes  your  thoughts.  Customers,  on  the  other  hand,  shouldn't  need  to 
think  about  it  at  all.  They  just  expect  great  service.  Our  approach  to  Business  Service  Management  helps  ensure  they 
get  it,  by  managing  IT  services  based  on  their  impact  to  your  business.  That  way,  with  your  service  commitments 
fully  in  sync  with  your  business  demands,  you'll  be  able  to  give  your  customers  that  most  coveted  and  elusive  of  all 
service  experiences:  complete  satisfaction.  Of  course,  we’ll  know  the  source  of  that  satisfaction  is  really  your  very 
own  IT  department.  Learn  more  and  get  the  latest  white  papers  at  ca.com/bsm. 


CA  World  08:  November  16-20 
Register  at  caworld.com 
by  September  19  and  save  $200 


■  Transforms 

IT  Manager 


Dossier 

Name:  Robert  Madge 
Htle:  President 
Company:  IDTrack 
Location:  Barcelona,  Spain 
Favorite  book:  Jess  of  the 
tTUrhevilles 


Robert  Madge 

The  Token  Ring  pioneer  talks  about 
his  high-flying  days,  his  company’s 
collapse  and  how  strengths  can 
sometimes  become  weaknesses. 


Does  the  name  Robert  Madge  mean  [  high-flying  company  has  since  met 

anything  to  you?  It  probably  rings  a  bell,  same  fate  as  that  of  Token  Ring  its 

if  a  distant  one.  Madge  was  the  founder  :  near  oblivion, 
of  Madge  Networks  Inc.,  which  in  the  Since  leaving  his  namesake  com 

late '90s  was  the  market  leader  in  Token  '  in 2001,  Madge  has  won  acclaim  it 
Ring  networking  technology.  The  once  ■  field  of  RFID  and  tracking  technol 


■  THE  GRILL  ROBERT  MADGE 


M  The  reason 
why  I  didn’t 
see  the  writ¬ 
ing  on  the  wall  when 
the  best  thing  to  do 
was  to  sell  the  com¬ 
pany  is  probably  the 
same  reason  why  I 
built  the  company  in 


the  first  place. 


are  good  and  bad  issues  about  nam¬ 
ing  a  company  after  yourself.  It  made 
me  that  much  more  committed.  It  had 
my  name  on  it,  so  of  course  I  would 
be  judged  by  the  company.  And  that’s 
what  happened,  even  when  I  wasn’t 
with  the  company.  So  obviously,  if  I 
was  going  to  be  completely  detached, 
I’d  rather  it  didn’t  carry  my  name.  But 
that  was  not  my  option.  The  name  was 
the  property  of  the  company. 

In  hindsight,  was  thsra  anything  you 
could  ham  dona  differently  that  would 
ham  saved  the  company  from  the 
downslide?  With  hindsight,  I  could 
always  speculate,  but  I  couldn’t  prove 
anything.  But  I’m  sure  I  should  have 
found  ways  for  the  company  to  do  bet¬ 
ter  than  it  did. 

The  fundamental  issue  was  that  we 
had  success  by  focusing  on  one  area  of 
technology,  and  as  that  area  of  technol¬ 
ogy  turned  out  to  have  a  limited  life¬ 
time  with  no  natural  progression  path, 
it  was  up  to  me  and  the  other  members 
of  the  management  team  to  find  a  fu- 

We  clearly  spent  money  in  areas  that 
didn't  produce  a  return. 

If  you  had  stuck  with  a  Token  Ring-only 
strategy,  do  you  think  that  would  ham 


objectively  whether  it  should  be  sold 

People's  weaknesses  and  strengths 
are  normally  the  same  things.  It  all 
depends  on  the  context  whether  they 
turn  out  to  be  strengths  or  weaknesses. 
The  reason  why  I  didn't  see  the  writ¬ 
ing  on  the  wall  when  the  best  thing  to 
do  was  to  sell  the  company  is  probably 
the  same  reason  why  I  built  the  com¬ 
pany  in  the  first  place. 

Whan  you  loft  in  2001,  what  did  you  do? 

I  went  and  dug  the  garden.  I  didn’t  re¬ 
ally  start  any  new  activity  for  a  couple 

How  did  you  make  out  financially?  Net 

loss  from  Madge  Networks.  If  you  look 
at  it  in  purely  cash  terms,  I  put  quite  a 
lot  more  money  into  Madge  Networks 
than  I  ever  got  out.  But  that’s  partly 
because  at  some  point  in  time,  I  took 
some  money  out  and  invested  it  else¬ 
where  and  made  more  money.  And  the 
more  money  I  made,  I  basically  plowed 
it  all  back  into  Madge,  at  a  time  when 
Madge  was  going  bad. 

Wan  you  financially  secure  whan  you 
left  in  2001?  Certainly  not  in  the  way  I 
might  have  hoped. 

—  Interview  by  Don  Tennant 
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VIRTUALIZE  STORAGE  NOW. 


■  OPINION 

Scot  Finnic 

Microsoft’s 
Turning  Point 

MICROSOFT  IS  probably  standing  at  its  most 

important  crossroads  ever,  just  when  Bill  Gates 
is  waving  goodbye. 

Well,  actually,  Microsoft  has  been  missing 
Gates  for  a  long  time. 

Something  happened  af-  |  tomers  at  the  expense  of  |  Microsoft  stayed  focused 
ter  the  2004  antitrust  nil-  smaller  companies  and  on  what  customers  want- 


part,  Gates'  instincts  and 
talents,  along  with  excel¬ 
lent  timing,  have  served 
Microsoft  very  well. 

But  somewhere  along 
the  way,  something 
changed.  After  the  anti¬ 
trust  ruling,  Microsoft 
took  a  new  tack,  focusing 
mostly  on  larger  IT  cus- 


big  competitors  —  such 
as  IBM,  Lotus  and  Word¬ 
Perfect  —  missed  the  boat. 

■  Yahoo  is  be¬ 
coming  Moby 
Dick  to  Micro¬ 
soft’s  Ahab. 


Steve  Ballmer,  has  asserted 
that  Linux  infringed  on 
Microsoft’s  intellectual 
property.  These  are  not 
the  hallmarks  of  a  com¬ 
pany  leading  the  technol¬ 
ogy  industry  with  strategic 

So  now  Microsoft  wants 
to  buy  Yahoo,  badly? 


to  ante  up  some  big-time 
vision  and  R&D  that  deliv¬ 
ers  significant  innovation. 
Anything  less  is  just  mind¬ 
ing  the  store  until  the  next 
leader  arrives.  ■ 

Scot  Finnie  is  Computer- 
world’s  editor  in  chief.  You 
can  contact  him  at  scot_ 
finnie@computerwortd.com. 
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SunGard  Availability  Services  help  your  business  move  forward  with 
the  most  advanced  and  widest  choice  of  information  availability  options 
in  the  industry 


From  virtualization  to  hot  sites  to  replication  and  vaulting— SunGard  Availability  Services 
does  it  all.  And  it's  all  we  do.  That  kind  of  focus  helps  ensure  high  availability  of  data, 
applications  and  systems  and  fits  your  needs  and  budget  precisely. 

When  we  partner  with  you,  you  worry  less  about  the  road  ahead.  Here's  why: 
a  track  record  of  100%  successful  recoveries;  over  60  facilities  with  redundant 
power  connected  to  SunGard's  secure  global  network;  and  more  than  20,000  end- 
user  positions  in  facilities  across  North  America  and  Europe.  SunGard  Availability 
Services— the  information  availability  solution  for  businesses  that  must  run  non-stop. 
Keep  moving,  call  1-800-468-7483  or  visit  www.availability.sungard.com. 

SUNGARD  iSaSL 

Availability  Services  Connected.* 


■  COVER  STORY 


HOWTO 

GET  MORE 

OUTOF 


to  Microsoft  IT  environments. 

VERSION  3  TO  THE  RESCUE 


WITH 

VERSION 


earlier  criticisms.  It  is  more  specific  as 
to  how  its  advice  might  be  carried  out, 
turning  v2's  theories  into  specifics  by 
including  business-case  examples  and 
templates  for  capturing  information.  It 
also  provides  performance  metrics  and 
workflow  examples. 

“What  v3  has  done  is  integrate 


ITIL  v3  has  expanded  the  concept 
of  IT  service  delivery  from  day-to-day 
operations  to  five  life-cycle  phases 
(each  with  its  own  guidebook):  strat¬ 
egy,  design,  transition  (which  covers 
implementation  and  change),  opera¬ 
tions  and  continual  improvement. 

And  at  the  strategy  end  of  things,  v3 
specifically  invites  the  business  man- 


ous  improvement  and  templates  for 
things  such  as  service-level  agreements. 

Alan  Claypool,  manager  of  business 
applications  for  the  city  of  Tampa. 


Where  can  I  get  them? 


Is  there  a  user  group? 


;  and  rollout,  as  well  as  the  linkages  of 
I  those  to  the  business.  He  said  v3  has 
already  provided  a  new  framework  for 
■  helping  his  department  review  some 
;  applications  recently  put  in  place,  like 
;  an  intranet  for  the  county. 

;  "We  can  look  at  these  and  say.  ‘I 
!  don't  think  I  really  asked  all  the  right 
•  questions  before  1  launched  this  thing.' 


ity  of  outcome  each  time  and  [allow  us 

Claypool  plans  to  get  further  into  v2 
before  going  headlong  into  v3,  but  he 
and  his  staff  have  already  begun  work¬ 
ing  their  way  through  the  v3  service 
strategy  book.  He  explains.  “We  started 


m 


what  the  service  specifically  is  trying 
to  achieve,”  he  says. 

Cannon  says  v3  helps  match  IT 


;  That  helps  tremendously.” 

;  Cassidy  hails  the  better  integration 
!  of  topics  in  v3  and  says  that’s  aided 
!  by  a  similar  advance  in  support  tools. 


COVER  STORY  ■ 


She  says  Progress  Energy  in  August 
will  begin  using  Service-now.com, 
a  Web-based  utility  that  supports 
ITIL  v3  practices.  “It  has  much  more 
integration  between  different  [ITIL] 
processes,”  Cassidy  says.  “You  could 
be  in  problem  management  but  want 
to  update  a  change  ticket,  and  it’s  very 
seamless." 

In  fact,  Cassidy  challenges  the  man¬ 
tra  that  companies  going  into  ITIL 


working  with  Sarasota  County.  We  are 
looking  at  their  processes  and  saying, 
■County  and  city  are  pretty  similar; 
let’s  just  photocopy  their  processes  and 
see  if  they  are  different  from  our  own 
and  should  be  tailored.’ " 

5  Don’t  expect  to  find  everything 
in  v3- or  like  everything  you 
hnd.  Cassidy  acknowledges 
that  v3  doesn't  do  everything. 


the  more  mature  areas." 

Humphrey  says  v3  is  weak  in  its 
treatment  of  business  continuity  as 
well  “Unless  you  have  sorted  out  busi¬ 
ness  continuity,  IT  service  continuity 
has  no  anchor,”  he  says. 

He  adds  that  it  also  falls  short  on 
governance,  but  a  coming  supplement 
will  better  address  linkages  between 
ITIL  and  things  like  the  audit-oriented 
Cobit  (Control  Objectives  for  Informa- 


Six  Stupid 
BudgetTricks 

Dumb  but  common  monetary  mistakes 
and  how  to  avoid  them.  By  Mary  K.  Pratt 


governance,  but  it  took  six  or 
seven  months  of  pain  to  get 
that  done,"  Gorsage  says.  The 
new  rigorous  approval  and 
planning  process  brought  the 
hospital’s  IT  spending  closer 
to  that  75/25/5  split. 

PLAN  TO  STOP  SPEND- 
B  ■  INO  ONCE  PROJECTS  00 

LIVE.  Underestimat- 


GIVEN  the  a  March  report  from  Gartner  dreds  of  thousands 

murky  eco-  Inc,  75%  of  enterprises  say  millions  —  of  dollar 

nomic  outlook,  improving  the  efficiency  of  IT  Here  are  some  of  t 

budgetary  ef-  is  a  critical  or  high  priority.  they  learned  not  to  i 

ficiencyisanin-  Think  you  have  the  bud- 
creasingly  important  part  of  get  covered?  So  did  many  ALWAYS  SAY  YE 

every  IT  leader’s  job.  In  fact,  others,  who  nonetheless  Acceding  toe 

according  to  “The  State  of  found  themselves  explain-  I  demands  can 

Enterprise  IT  Budgets:  2008,”  ing  missteps  that  cost  hun-  I  budget  spirali 


.  budgets,  says  Ken  Gabriel, 

Dusands  —  even  a  partner  and  global  lead 
of  dollars.  for  the  ERP  advisory  unit  at 

some  of  the  things  KPMG  International,  a  glob- 
d  not  to  do:  al  network  of  professional 

services  firms. 

rs  SAY  YES.  It  can  leave  companies 

ding  to  constant  with  budget  overruns  of  up 
nds  can  send  the  to  20%,  he  says  —  hardly 
st  spiraling  out  pocket  change  when  proj- 


■  MOBILE  &  WIRELESS 


y°ce 


One  side  of  the  P-Per  is  a  camera,  the  other  has  a  phone/messaging  interface. 


Meet  Tomorrow’s 
Mobfle  Phones 

Old  Ma  Bell  would  hardly  recognize  these 
futuristic  upstarts.  By  Brian  Nadel 

fr — I — f  he  cookie-cut-  Nokia  Corp.’s  Morph  is  technology,  the  phone  can 

|  ter  approach  to  made  of  flexible  materials  change  its  personality  to  be- 
|  designing  mobile  that  mimic  the  suppleness  come  whatever  is  most  suit- 
:ould  dis-  of  spider’s  silk.  It  is  designed  able  for  the  task  at  hand,” 
few  years  to,  well,  morph  between  says  Tapani  Ryhanen,  head 

daring  what  looks  like  a  traditional  of  strategic  research 


I  SECURITY  MANAOER’S  JOURNAL  MATHIAS  THURMAN  TlDUbfe 

Ticket 


For  Once,  Some 
Incontestable  ROI 

Return  on  investment  can  be 

elusive  in  infosec.  But  a  disaster 
averted  is  a  blessing  in  disguise. 


ISSUE:  An  attempted 
theft  of  intellectual  prop¬ 
erty  could  have  cost  the 

ACTIOM  FLAM:  Lever¬ 
age  the  incident  for  more 


nipped  in  the  bud.  And  it* 
clear  that  wouldn’t  have 
happened  if  not  for  the 


about  hitting  the  ROI  jack-  operation  of  our  tools, 
pot.  as  we  recently  did.  The  employee  in  ques 

The  investment  in  this  tion  worked  in  one  of  ou 
case  was  our  data  leak  Southeast  Asian  offices, 
prevention  infrastructure,  large  portion  of  our  cus- 
which  we  rely  on  for  de-  tomer  base  is  in  Asia,  mak- 
tecting  attempts  to  send  ing  this  potential  breach 

any  of  our  intellectual  even  more  significant, 

property  out  of  the  com-  When  we  have  an  indi- 
pany.  For  a  while,  the  tech-  cation  of  attempted  theft 

nology  was  hit-or-miss  for  of  intellectual  property,  we 


a  discounted  rate.  In  addi¬ 
tion,  several  e-mails  sug¬ 
gested  he  planned  to  lure 
many  of  our  company’s 


MORE  EVIDENCE 

The  plot  thickened 
when  we  looked  at  the 


uals.  You  might  remember 
that  I  implemented  Micro¬ 
soft  Rights  Management 
Software  a  couple  of  years 
ago,  but  it  can’t  be  used  to 
protect  Adobe  PDF  files. 


SMART  MFPs? 

HOW  ABOUT  GENEROUS  TOO? 


Wh\TDoYoUH\Vt-To.sAy? 


Bart  Perkins 

Management  Ducks 


I~  ,  UCKS  ARE  subpar  employees  who  contribute  lit- 
|  tie  to  an  organization’s  productivity.  My  recent  col¬ 
umn  “IT  Full  of  Ducks?”  generated  many  respons¬ 
es  from  readers  reporting  ducks  in  management 
positions.  Ducks  are  indeed  found  at  all  levels  of  an  organiza¬ 
tion,  but  ducks  in  management  (DIM)  are  the  very  worst  kind. 

DIMs  can  do  big  damage  Da-motivating  people.  Star  And  there  are  additional 

in  the  following  ways:  employees  perform  best  obstacles,  like  these: 

Wasting  time.  Si  nee  they  for  people  they  respect;  ■  Busy  executives  often 

frequently  aren’t  very  they  hate  working  for  don’t  have  (or  don’t  take) 

bright,  DIMs  often  want  DIMs.  Stars  always  have  the  time  to  clearly  under- 


highly  compensated  man¬ 
agement  positions. 

A  comprehensive  perfor- 


degree  review  process 
combines  feedback  from 
an  employee’s  peers,  sub¬ 
ordinates  and  manager(s). 
Some  organizations  in¬ 
clude  input  from  custom¬ 
ers,  acknowledged  stars 
and  other  stakeholders.  For 
information  on  360-degree 
reviews,  see  Wikipedia 
and  the  U.S.  Office  of  Per¬ 
sonnel  Management  (www. 
opm.gov).  If  you  can’t  get 
rid  of  DIMs  easily,  assign 


Rather  than  attempting 
to  do  a  few  things  well, 
DIMs  often  initiate  numer 
ous  ill-conceived  projects 
that  consume  significant 
financial  and  employee 
resources.  This  defocuses 
(and  frustrates)  the  orga- 


ten  alienate  their  peers, 
customers  and  suppliers, 
which  can  significantly 
damage  communication 
(and  cooperation)  among 
organizations.  In  addition 


Don’t  let  DIMs  drive  stars 
out  of  your  organization! 

Unfortunately,  it  is  ofter 
difficult  for  senior  man¬ 
agement  to  identify  DIMs. 
It  can  be  problematic  to 
determine  whether  man¬ 
agement  objectives  have 
actually  been  met,  since 
many  objectives  lack  ex¬ 
plicit  metrics.  Moreover, 
management  objectives 
are  frequently  subjective. 


pendently,  against  broad 
objectives.  As  a  result, 
many  executives  have 
limited  day-to-day  contacl 
with  subordinates,  letting 
DIMs  fly  under  the  radar. 

■  Many  performance 


ing  efforts  have  placed 
many  good  managers  back 
on  the  market  (negating 
the  assumption  that  un¬ 
employed  managers  are 
ducks).  Don’t  tolerate 
ducks  at  any  level,  espe¬ 
cially  in  management. 
Search  for  competent  re¬ 
placements  ASAP.  Mean- 


than  thorough  investiga¬ 
tion  and  evaluation  of  per¬ 
formance. 
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Waten 


growth  in  employment  between  2006  and  2016.  The  spring  issue  of  the 


ed  classifications,  such  as  'statistician.'  But  it  wasn't  al  good  news  for 
computer-related  jobs.  The  ranks  of  programmers  are  expected  to  drop 
by 18,000 during  the  decade.  According  to  the  BIS.  ‘Advancements 


in  the  software  development  process,  the  offshoring  of  jobs  and  other 
workers'  ability  to  do  some  programming'  will  contribute  to  that  decline. 


■  ASK  A  PREMIER  100  LEADER 

Dale  Christian 

f*  The  CIO  at 

-1  Avanade  Inc.  in 

* ‘  Seattle  answers 
\  questions  about 
commimicating  with  the 
boss  and  making  the  most 
of  a  degree  in  infosec. 


The  division  of  the  IT  depart-  list  for  the  rest  of  your  workgroup, 
merit  I  work  in  lost  a  few  em-  laying  out  what  services  the  team 
ployees  due  to  attrition  last  delivers  to  the  company  and  what 


i.  etc. -are  needed  to  meet 
those  expectations.  Then  manage- 
ment  can  decide  whether  it's  worth 
hiringmorepeopleorreducingthe 
services  your  group  provides. 


working  60-plus  hours  a 


weekends,  and  I’m  getting 
burnt  out.  Do  you  have  any 
suggestions  on  how  I  can  ap¬ 
proach  my  supervisor  about 
this?  Approach  the  situation  from 
your  supervisor's  point  of  view.  She 
probably  doesn't  want  her  team 
working  60-hour  weeks  and  real¬ 
izes  that  it's  not  a  healthy  or  viable 


she's  likely  under  pres¬ 
sure  from  management  ©  question? 

to  keep  costs  down  and  iJZeoiMrSel 

doesn't  have  a  strong  WQUwte.wnd 

case  to  justify  hiring  compiiterworid.com. 


networking,  eight  years  in 


into  the  (T  field  ful 
time.  Most  hiring 

the  help  desk  only. 


ier.First.documentthe  problem 
objectively:  Write  down  the  tasks 
you  are  expected  to  perform  and 
how  long  it  takes  to  do  each  one 
-  each  day.  week,  month  or  quarter. 

Next,  use  that  list  as  a  basis  for 
discussion:  Are  there  tasks  that  you 
can  drop,  service  levels  that  can 
be  relaxed  or  efficiencies  you  can 
find?  You  might  be  able  to  slim  your 
jobdownjustbyfocusingonthe 
essentials.  Or  you  might  convince 
her  that  more  people  are  needed 
on  your  team. 


so  you  should  look  for  entry-level 
positions  in  operations  (also  called 
Tier  2  support,  production  manage- 


give  you  hands-on  experience  in  the 
production  infrastructure.  Support¬ 
ing  servers,  networks  and  applica¬ 
tions  will  put  you  in  a  good  position 
to  grow  directly  in  that  area.  It  wil 


tice  and  deepen  your  experience 
and  move  into  a  security  role  when 
the  time  is  right.  Good  luck! 


Q 

Labor 

will  see  16% 


Zooming  In 

Breaking  down  the  BLS's  numbers 

This  page  has  touted  the  estimate  from  the  U.S.  Bureau  of  Labor 
Statistics  that  'computer  and  mathematical  occupations'  will  see  16% 
growth  m  employment  between  2006  and  2016.  The  spring  issue  of  the 
Occupational  Outlook  Quartertf  breaks  that  down  into  some  specific 
lob  categories  The  breakdown  shows  that  the  overall  average  could 

ed  classifications,  such  as  "statistician  "  But  it  wasn't  all  good  news  for 
computer-related  robs  The  ranks  ol  programmers  are  expected  to  drop 
by  18  000  during  the  decade  According  to  the  BLS.  "Advancements 
<i  the  software  development  process,  the  offshoring  of  jobs  and  other 
workers'  atxkty  to  do  some  programming'  will  contribute  to  that  decline. 


9  ASK  A  PREMIER  100  LEADER 

Dale  Christian 

IlicCK )  at 

Avanade  Inc.  in 

Seattle  answers 
questions  about 
communicating  with  the 
boss  and  making  the  most 
of  a  decree  in  intdsec. 

The  division  of  the  IT  depart-  i  list  for  the  rest  of  your  workgroup, 
ment  I  work  in  lost  a  few  em-  !  laying  out  what  services  the  team 
ployees  due  to  attrition  last  |  delivers  to  the  company  and  what 
resources  -  people,  hardware, 
software,  etc.  -  are  needed  to  meet 


has  distributed  the  workload 
to  me  and  others.  I'm  now 
working  60-plus  hours  a 
week,  including  occasional 
weekends,  and  I'm  getting 
burnt  out.  Do  you  have  any 
suggestions  on  how  I  can  ap¬ 
proach  my  supervisor  about 
this?  Approach  the  situation  from 
your  supervisor's  point  of  view.  She 
probably  doesn't  want  her  team 
working  60-hour  weeks  and  real¬ 
izes  that  its  not  a  healthy  or  viable 
situation.  However, 
she's  likely  pnder  pres¬ 
sure  from  management 
to  keep  costs  down  and 
doesn't  have  a  strong 
case  to  justify  hiring 


ment  can  decide  whether  it's  worth 
hiring  more  people  or  reducing  the 
services  your  group  provides. 

I  have  a  fresh  bachelor’s  de- 


nance  and  repair,  two  years 
in  Internet  help  desk,  and  two 
in  PDA  and  BlackBerry  sup- 


So,  make  a  case  for 
her.  First,  document  the  problem 
objectively:  Write  down  the  tasks 
you  are  expected  to  perform  and 
how  long  il  takes  to  do  each  one 
-  each  day.  week,  month  or  quarter. 

Next,  use  that  list  as  a  basis  lor 
dtscussion:  Are  there  tasks  that  you 
can  drop,  service  levels  that  can 
be  relaxed  or  efficiencies  you  can 
find?  You  might  be  able  to  slim  your 
lob  down  just  by  focusing  on  the 
essentials.  Or  you  might  convince 
her  that  more  people  are  needed 
on  your  team. 

In  that  case,  give  your  supervisor 
the  tacts  to  take  the  case  to  her 
manager.  Help  her  develop  a  similar 


suggest?  Call  me!  Se¬ 
riously.  security  skills  are  valuable. 
The  challenge  is  that  security  roles 
tend  to  demand  deep  experience, 
so  you  should  look  lor  entry-level 
positions  in  operations  (also  called 
Tier  2  support,  production  manage- 


infrastructure  engineering)  that  will 
give  you  hands-on  experience  in  the 
production  infrastructure.  Support¬ 
ing  servers,  networks  and  applica¬ 
tions  will  pul  you  in  a  good  position 
to  grow  directly  in  that  area.  It  will 
also  give  you  opportunities  to  prac¬ 
tice  and  deepen  your  experience 
and  move  into  a  security  role  when 
the  time  is  right.  Good  luck! 
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SharHank 


Buh-bye! 

It’s  almost  noon,  and  this  pilot 
fish  is  leaving  his  dentist’s 
office  after  a  particularly 
traumatic  root  canal  when 
his  BlackBerry  vibrates. -It’s 
a  message  from  a  longtime 
friend,  the  VP  to  whom  I  re¬ 
ported  before  his  discharge 
the  week  before,"  fish  says. 
"His  sudden  departure  was 
part  of  the  usual  aftermath  of 
a  forced  sale  of  the  company 
during  involuntary  bankrupt¬ 
cy.  The  message  text:  ‘Check 
your  e-mail  when  you  get  a 
chance.'  When  I  finally  get 
home  and  look  at  my  company 
in-box.  I  find  a  forwarded 
note  from  the  HR  department 
with  the  subject  ‘Approval 
required:  Involuntary  termina¬ 
tion.’  Because  nobody  had 


removed  his  e-mail  account, 
nor  removed  him  from  the 
approval  chain  for  HR  ac¬ 
tions,  he  received  a ‘Click 
here  to  authorize  terminating 
this  employee  with  less  than 
24  hours'  notice'  message. 
The  company  had  absolutely 
no  way  to  let  me  know  that  I 
had  been  zapped  -  the  only 
person  on  the  org  chart  who 
could  have  transmitted  this 
happy  news  to  me  had  been 
rendered  dead  beef  a  week 
before." 

Flashback  to  August  2003, 
when  the  biggest  blackout  in 
American  history  strikes  the 
northeastern  U.S.  "Power 
went  out  in  the  afternoon, 
and  the  UPS  and  generator 


kicked  in  just  as  they  were 
supposed  to,"  says  this  pilot 
fish  on  the  job.  “Everything  in 
the  data  center  kept  humming 
along.  But  the  next  morn¬ 
ing.  I  received  a  call  that  the 
generator  didn't  have  enough 
fuel  to  last  through  the  day, 
and  no  one  knew  how  long  It 
would  be  before  power  was 
restored.  I  made  the  decision 
to  make  an  orderly  shutdown 
of  all  the  servers  rather  than 
risk  them  just  losing  power 
suddenly.  The  following  Mon¬ 
day,  down  came  the  hammer 
‘Why  did  you  shut  us  down  for 
an  entire  day?'  The  shipping 

the  West  Coast  were  so  upset 
they  could  not  use  e-mail  or 
the  Internet  that  they  forgot 
they  couldn't  use  the  ERP.  I 
think  next  time,  IH  just  let  the 
power  drop  and  see  how  they 
like  that  recovery." 

That  Must  Be  It 

User's  phone  goes  silent 
-  probably  because  his  line 
has  been  “recycled  in  the 


course  of  moving  people  and 
desks  in  his  office,"  says  a 
pilot  hsh  who  works  close 
by.  “The  outside  service 
provider's  SLA  on  installing 
new  lines  is  more  important 
than  that  about  providing 

grumbles.  “An  incident  ticket 
was  created.  A  few  days  later, 
his  phone  was  still  dead,  but 
the  ticket  proved  to  be  closed. 
The  resolution?  ‘Technician 
reported  phone  was  fixed.  I 
called  the  user  and  heard  the 
ring  tone,  so  OK.  User  did  not 
pick  up  phone,  probably  at  the 
coffee  machine.' " 

Use  your  coffee  break  to  send 
Sharky  a  true  tale  of  IT  life  at 
sharky@computerworid.com. 
You’ll  snag  a  snazzy  Shark 
shirt  if  I  use  it 


I  FRANKLY  SPEAKING 


Frank  Hayes 

Who  Pays? 


WHAT  DO  YOU  DO  when  a  network  adminis¬ 
trator  goes  bad?  That’s  the  question  IT  staff¬ 
ers  for  the  city  of  San  Francisco  are  facing  this 
week.  One  of  their  own,  a  net  admin  named 
Terry  Childs,  was  arrested  for  sabotaging  the  city  govern¬ 
ment’s  new  fiber  backbone  network  (see  story,  page  6). 


Now  he’s  in  jail.  But  he’s 
not  the  only  one  who  will 
pay  the  price. 

Until  recently,  Childs 
was  well  regarded  in  his 
IT  shop.  But  last  month, 
that  all  began  to  unravel. 
On  June  20,  Childs  report¬ 
edly  went  after  the  IT 
department's  newly  hired 
head  of  security,  chasing 
her  with  a  camera  until 
she  locked  herself  in  an 
office  to  escape. 

The  security  chief  was 
auditing  who  had  pass¬ 
word  access  to  the  new 
network.  According  to  the 
San  Francisco  Chronicle, 
that  audit  soon  turned  up 
the  fact  that  Childs  had 
changed  passwords  so 
that  only  he  had  adminis¬ 
trative  access  to  the  net¬ 
work.  Childs  also  report¬ 
edly  installed  software 
to  monitor  his  managers’ 
e-mails  related  to  his  job 
performance. 

Childs  was  suspended 
on  July  9  for  insubordina¬ 
tion.  When  police  asked 
Childs  for  the  passwords, 
first  he  gave  them  phony 


information,  then  he  re¬ 
fused  to  divulge  the  real 
passwords.  On  July  14, 
Childs  was  arrested  for  fel¬ 
ony  computer  tampering. 

Because  prosecutors 
feared  for  the  security  of 
law  enforcement  docu¬ 
ments,  jail  inmate  book¬ 
ings,  payroll  files  and 
other  city,  Childs  was 
jailed  with  bail  set  at  a 
whopping  $5  million. 

To  date,  Childs  hasn't 
explained  why  he  alleged¬ 
ly  locked  up  the  network 
—  and  he  hasn't  coughed 
up  the  passwords. 

Meanwhile,  his  co¬ 
workers  are  now  facing 
the  possibility  of  having 
to  rebuild  the  network 
and  verify  everything 
stored  on  it  —  about  60% 
of  all  government  data  in 
San  Francisco. 

■  Childs  hasn't 
explained  why  he 
allegedly  locked  up 
the  network  -  and 
he  hasn’t  coughed 
up  the  passwords. 


Oh,  and  also  having  to 
live  under  a  cloud  for  as 
long  as  they  work  in  that 
IT  shop.  Because  some¬ 
one  in  their  department 
was  trusted  too  much, 
they’ll  be  distrusted.  By 
users,  managers  —  and 
one  another. 

Is  that  fair?  Of  course 
not.  They’re  not  the  ones 
who  sabotaged  the  net¬ 
work  and  created  a  huge 
mess.  They're  not  the 
ones  who  should  have 
acted  more  quickly  and 
effectively  when  it  looked 
like  there  was  a  problem 
employee  on  the  loose. 

But  they’re  the  ones 
who’ll  pay. 

So  what  to  do  in  the 
wake  of  that  net  admin 
gone  bad?  First,  there’s  the 
fiber  backbone  to  unlock 
and  sanitize,  or  rebuild 
if  necessary.  Then,  no 
doubt,  new  technology 
and  new  layers  of  auditing 
will  be  added  to  increase 
security  scrutiny. 

That’s  important,  but 
it’s  not  enough.  Childs 
was  able  to  lock  up  the 


network  because  he 
was,  in  effect,  a  one-man 
show.  Setting  up  a  team 
structure  for  network 
administration,  in  which 
team  members  cross- 
train  and  rotate  through 
one  another’s  jobs,  would 
make  such  an  occurrence 
much  less  likely.  It  would 
also  help  avoid  problems 
when  a  net  admin  doesn’t 
go  rogue,  but  gets  hit  by  a 
bus  instead. 

No  lone  wolves.  No  bot¬ 
tlenecks.  Nobody  who’s 
indispensable. 

Cross-trained  teams 
also  make  it  easy  for 
managers  to  act  swiftly 
when  an  employee  turns 
into  a  problem  —  there’s 
no  hesitation  because  of 
worrying  about  how  he’ll 
be  immediately  replaced. 
And  teams  help  foster  a 
culture  of  security,  they 
police  themselves  in  ways 
no  security  audit  can. 

What  teams  can’t  do  is 
restore  what  Terry  Childs 
stripped  from  his  co¬ 
workers:  the  respect  and 
trust  of  the  people  who 
depend  on  them. 

The  estimate  for  re¬ 
building  San  Francisco’s 
fiber  backbone,  if  it  comes 
to  that,  is  eight  weeks. 

But  rebuilding  respect 
and  trust  for  San  Francis¬ 
co’s  IT  department?  That 
could  take  years.  ■ 

Frank  Hayas  is  Computer- 
world’s  senior  news 
columnist.  Contact  him 
atfrank_hayes@ 
computerworld.com. 
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Starbucks  i.T.  found  a  partner  to  help  support  16,000 

stores  in  45  countries. 


